{"id":"https://openalex.org/W4417181632","doi":"https://doi.org/10.1142/s0218001425570289","title":"Integrating Graph Neural Networks and Dynamic Community Characterization for Advanced Persistent Threat Detection and Attack Provenance Reconstruction","display_name":"Integrating Graph Neural Networks and Dynamic Community Characterization for Advanced Persistent Threat Detection and Attack Provenance Reconstruction","publication_year":2025,"publication_date":"2025-12-10","ids":{"openalex":"https://openalex.org/W4417181632","doi":"https://doi.org/10.1142/s0218001425570289"},"language":"en","primary_location":{"id":"doi:10.1142/s0218001425570289","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218001425570289","pdf_url":null,"source":{"id":"https://openalex.org/S41486457","display_name":"International Journal of Pattern Recognition and Artificial Intelligence","issn_l":"0218-0014","issn":["0218-0014","1793-6381"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Pattern Recognition and Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029332744","display_name":"Yingchao Wang","orcid":"https://orcid.org/0000-0002-7945-1212"},"institutions":[{"id":"https://openalex.org/I4210111575","display_name":"Xinjiang Institute of Engineering","ror":"https://ror.org/01s5hh873","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210111575","https://openalex.org/I4210157944"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yingchao Wang","raw_affiliation_strings":["Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0002-7945-1212","affiliations":[{"raw_affiliation_string":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210111575"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Na Li","orcid":"https://orcid.org/0009-0007-0586-8705"},"institutions":[{"id":"https://openalex.org/I4210111575","display_name":"Xinjiang Institute of Engineering","ror":"https://ror.org/01s5hh873","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210111575","https://openalex.org/I4210157944"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Na Li","raw_affiliation_strings":["Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0007-0586-8705","affiliations":[{"raw_affiliation_string":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210111575"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Dechuan Qiu","orcid":"https://orcid.org/0009-0007-4253-8043"},"institutions":[{"id":"https://openalex.org/I4210111575","display_name":"Xinjiang Institute of Engineering","ror":"https://ror.org/01s5hh873","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210111575","https://openalex.org/I4210157944"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dechuan Qiu","raw_affiliation_strings":["Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0007-4253-8043","affiliations":[{"raw_affiliation_string":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210111575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089872175","display_name":"Bingyu Cao","orcid":null},"institutions":[{"id":"https://openalex.org/I4210111575","display_name":"Xinjiang Institute of Engineering","ror":"https://ror.org/01s5hh873","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210111575","https://openalex.org/I4210157944"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bingyu Cao","raw_affiliation_strings":["Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0009-8892-5385","affiliations":[{"raw_affiliation_string":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210111575"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Huaxing Xiao","orcid":"https://orcid.org/0009-0009-0872-3223"},"institutions":[{"id":"https://openalex.org/I4210111575","display_name":"Xinjiang Institute of Engineering","ror":"https://ror.org/01s5hh873","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210111575","https://openalex.org/I4210157944"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huaxing Xiao","raw_affiliation_strings":["Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0009-0872-3223","affiliations":[{"raw_affiliation_string":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210111575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5021132688","display_name":"Peng Zhou","orcid":"https://orcid.org/0009-0001-9182-8086"},"institutions":[{"id":"https://openalex.org/I4210111575","display_name":"Xinjiang Institute of Engineering","ror":"https://ror.org/01s5hh873","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210111575","https://openalex.org/I4210157944"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Zhou","raw_affiliation_strings":["Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0001-9182-8086","affiliations":[{"raw_affiliation_string":"Xinjiang College of Science and Technology, Korla, Xinjiang 841000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210111575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210111575"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18321755,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"07","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.617900013923645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.617900013923645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.10000000149011612,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.05469999834895134,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.6043000221252441},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5746999979019165},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5126000046730042},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.44690001010894775},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3928000032901764},{"id":"https://openalex.org/keywords/attribution","display_name":"Attribution","score":0.39010000228881836},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.3790999948978424},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3774999976158142}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.796999990940094},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.6043000221252441},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5950000286102295},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5746999979019165},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5126000046730042},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4535999894142151},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.44690001010894775},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3928000032901764},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.39010000228881836},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3840999901294708},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.3790999948978424},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3774999976158142},{"id":"https://openalex.org/C13540734","wikidata":"https://www.wikidata.org/wiki/Q5318996","display_name":"Dynamic network analysis","level":2,"score":0.3752000033855438},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.33219999074935913},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.299699991941452},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.29280000925064087},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.27219998836517334},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.2639999985694885},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2639000117778778},{"id":"https://openalex.org/C110893760","wikidata":"https://www.wikidata.org/wiki/Q3115590","display_name":"Named graph","level":5,"score":0.2549999952316284}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218001425570289","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218001425570289","pdf_url":null,"source":{"id":"https://openalex.org/S41486457","display_name":"International Journal of Pattern Recognition and Artificial Intelligence","issn_l":"0218-0014","issn":["0218-0014","1793-6381"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Pattern Recognition and Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2131681506","https://openalex.org/W2897249806","https://openalex.org/W4387810249","https://openalex.org/W4407845611","https://openalex.org/W4412026571","https://openalex.org/W4412087406","https://openalex.org/W4412455369","https://openalex.org/W4412753105","https://openalex.org/W4413504454"],"related_works":[],"abstract_inverted_index":{"Addressing":[0],"the":[1,9,46,94,118],"challenges":[2],"of":[3,15,48,135,142],"detection":[4,25],"and":[5,11,26,45,137],"attribution":[6,27,140],"posed":[7],"by":[8,88],"concealment":[10],"dynamic":[12,35],"evolutionary":[13],"traits":[14],"Advanced":[16],"Persistent":[17],"Threats":[18],"(APTs),":[19],"this":[20],"paper":[21],"proposes":[22],"an":[23,101,122,130,138],"intelligent":[24],"method":[28,120],"integrating":[29],"Graph":[30,61],"Neural":[31,62],"Networks":[32],"(GNNs)":[33],"with":[34],"community":[36],"features.":[37],"Initially,":[38],"multi-source":[39],"datasets":[40],"undergo":[41],"cleansing,":[42],"feature":[43,78],"extraction,":[44],"construction":[47],"temporal":[49],"graph":[50],"sequences.":[51],"Dynamic":[52],"attack":[53,74,111,131],"communities":[54,71],"are":[55],"modeled":[56],"using":[57],"a":[58],"Temporal":[59],"Attention":[60],"Network":[63],"(TA-GNN)":[64],"to":[65,92],"capture":[66],"abrupt":[67],"structural":[68],"shifts":[69],"within":[70],"across":[72],"various":[73],"stages.":[75],"A":[76],"tri-dimensional":[77],"framework":[79],"encompassing":[80],"\u201ccommunity":[81],"behavior-traffic":[82],"statistics-GNN":[83],"embeddings\u201d":[84],"is":[85,108],"established,":[86],"enhanced":[87],"semi-supervised":[89],"contrastive":[90],"learning":[91],"bolster":[93],"identification":[95,133],"capability":[96],"for":[97,110,150],"unknown":[98],"attacks.":[99],"Finally,":[100],"improved":[102],"Temporal-aware":[103],"Taint":[104],"Propagation":[105],"Algorithm":[106],"(TTPA)":[107],"employed":[109],"chain":[112],"reconstruction.":[113],"Experimental":[114],"results":[115],"demonstrate":[116],"that":[117],"proposed":[119],"achieves":[121],"F1-score":[123],"approximately":[124],"15%":[125],"higher":[126],"than":[127],"traditional":[128],"approaches,":[129],"path":[132],"accuracy":[134],"92%,":[136],"average":[139],"time":[141],"4.2[Formula:":[143],"see":[144],"text]s,":[145],"thereby":[146],"providing":[147],"robust":[148],"support":[149],"APT":[151],"defense.":[152]},"counts_by_year":[],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-12-10T00:00:00"}